Sub-processors
In short: FoxLink uses a small, deliberate set of trusted service providers to run the product. Your account and CRM data are stored and processed in the United Kingdom. We keep this list current and give notice before it changes.
What is a sub-processor?
A sub-processor is a third-party service that Polyfox Studio Ltd uses to help deliver FoxLink and that may process personal data on our behalf. We only engage sub-processors that provide sufficient guarantees to protect your data, and we remain responsible to you for their performance.
Our sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | All account and CRM data | EU West (London), UK |
| Vercel | Application hosting and compute; encrypted off-site backup copies of stored files | Transient request data; copies of uploaded files | London (lhr1), UK |
| Anthropic | AI-assisted features (on request, plus scheduled lead scoring, deal-health checks and daily briefs for paid workspaces) | CRM context needed for each task; not used to train models | United States |
| Speechmatics | Voice-note transcription (on-demand only, when you dictate) | Audio you record for a note; transcribed, then the job is deleted | EU (UK company) |
| Resend | Transactional and notification email | Email addresses and message content | United States |
| Postmark | Inbound email processing (emails you forward or BCC to your FoxLink logging address) | Headers, content and attachments of those emails | United States |
| Upstash | Rate limiting and usage counters (Redis) | Workspace / user / API-key identifiers and counters | EU (London), UK |
| Sentry | Error monitoring and diagnostics | Diagnostic and error context, which may include limited personal data | EU (Frankfurt) |
| Stripe | Payment processing | Billing and contact data (no card data stored by FoxLink) | United States / EU |
Where a sub-processor processes data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement and/or the European Commission's Standard Contractual Clauses.
Changes to this list
We will give at least 30 days' notice before adding or replacing a sub-processor, by updating this page and notifying workspace owners. If you have a data processing agreement with us and object to a new sub-processor on reasonable data-protection grounds, you may raise it with us during that period.
Contact
Questions about our sub-processors or data protection? Email privacy@foxlink.network.